Main
Vulnerability Database
Exploits
ID:2932 - Exploit for Insufficiently protected credentials in Git - CVE-2020-5260
ID:2932 - Exploit for Insufficiently protected credentials in Git - CVE-2020-5260
Published: June 3, 2020
Vulnerability identifier: #VU27258
Vulnerability risk: Medium
CVE-ID: CVE-2020-5260
CWE-ID: CWE-522
Exploitation vector: Remote access
Vulnerable software:
Git
Git
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to sensitive information on the system.
The vulnerability exists due to the Git can be tricked into sending private credentials to a host controlled by an attacker. A remote attacker can send a specially crafted URL to "git clone" that will present stored credentials for any host to a host of their choosing.
Remediation
Install updates from vendor's website.